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Event owner decides on authenticator. 
Supplies deadline, security properties, 
password, admin, info. 




f 


Authenticator genera 
private encryption ke 


tes public and 

ys Kpub and Kpriv 



± 

Authenticator creates event identifier 
EID encoding Authenticator host name & 
port, unique event number, security 
properties. 





f 


Authenticator records EID, Kpub, Kpriv 
in its private database and publishes EID 
and Kpub 




r 


Event owner publicizes EID and Kpub in 
announcement of event 






Client side submission software for upload 
proxy technique make available to clients 



FIG. 3 
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Client-side submission software 
generates a unique identifier for its data 
T (as by using a one-way hash function 
to produce h(T). 



Based on the EK>, h(T) and the client's 
email address (usually the email address 
of the user of the client) are sent to the 
authenticator 



Authenticator time- stamps the received 
message from the client with a time 
stamp a. 



Authenticator concatenates h(T) with o and 
encrypts with private key of event Kpriv. Sends s 
= Kpriv (h(T), o), upload ticket to client. Sends 
list of upload proxy servers. Stores info. 



Client inspects s to make sure it was 
generated by Authenticator 



Client-side software generates session 
key Kses, concatenates Kses with e and 
encrypts it with Kpub 



t 

Client sends EID, Kses(T), and Kpub(Kses, 
e ) to an upload proxy server which sends a 
receipt to the client 



FIG. 4 
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FIG. 5 



Upload proxy server sends receipt to the 
destination server 




* 


Destination server re 
the identity of the sei 
server 


cords the receipt and 
iding upload proxy 



Destination server retrieves (downloads) 
the data stored in the upload proxy 
servers 



Destination server uses the event private key 
Kpriv to decrypt the submissions and obtain T and 
upload ticket s 



Destination server uses its private key 
Kpriv to recompute upload ticket s and 
insure that T and a have not been altered 



In response to message from destination 
server that data was successfully 
downloaded from upload proxy server, the 
upload proxy server can delete the data 
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